$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af91c707-1a7d-3a4a-adaf-db254344626b.roa File: af91c707-1a7d-3a4a-adaf-db254344626b.roa (raw, json) Hash identifier: ZEAMCyQHLzUGstZqhqdhUwGPGLne6R52CfqvJoGyT0I= Subject key identifier: 52:42:61:44:2B:93:39:70:B8:61:34:FB:4B:46:92:78:F9:90:57:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA790530181F67C4499CDAA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af91c707-1a7d-3a4a-adaf-db254344626b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396614 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:53:01:81:f6:7c:44:99:cd:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=30535058-8f9d-4d10-ad1d-e759c54de7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:ec:f8:fa:37:e8:6c:63:1f:d9:bc:79:bb: f9:23:81:aa:80:8f:81:24:f8:53:43:88:50:7c:47: b5:f3:2a:c4:c5:25:a2:a5:c6:91:41:15:0e:4e:86: f4:f7:fa:20:0f:59:67:b6:7f:07:8b:54:ed:ce:e5: 84:f0:ab:5e:f0:fc:10:38:b8:9e:70:cf:ab:d0:5b: 08:17:ba:99:1f:d3:5f:d0:c5:b6:5d:a8:da:d0:87: 84:55:63:48:8c:15:ac:7c:e9:38:ad:68:2f:97:3f: af:4b:99:3a:0e:81:68:4a:71:90:94:fd:52:34:fe: 16:2f:12:78:e4:de:d9:9c:95:cd:c2:76:2d:c5:2d: 8b:3f:9f:a7:8f:b0:ad:39:df:f7:e1:04:ca:7b:95: 61:1b:d0:04:a7:6a:48:19:c9:f5:3d:26:f9:32:97: b9:70:48:6a:d9:09:0d:82:c6:40:d0:ee:32:5d:58: 58:8e:2b:7e:e7:b2:7a:56:8e:9f:0d:de:c7:56:ed: 35:24:33:22:0c:e9:dc:3a:2e:47:37:d7:b0:70:6b: 67:fd:cc:ab:55:4c:41:1a:4d:d9:b2:0c:39:46:49: 13:b2:1a:da:57:bb:5d:f6:94:4f:9f:61:73:c5:0a: 30:30:94:78:b4:a1:3c:74:1d:f2:da:11:db:58:7e: 9f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:42:61:44:2B:93:39:70:B8:61:34:FB:4B:46:92:78:F9:90:57:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af91c707-1a7d-3a4a-adaf-db254344626b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:13:73:fe:fa:0a:b5:cf:dc:4c:b4:ff:82:f4:40:97:47:69: 46:50:12:40:7f:20:ff:f9:5e:f3:14:96:f2:24:7d:76:b7:22: df:7d:dd:d1:71:32:b2:b3:66:5a:a7:52:01:ea:eb:30:43:ea: db:18:b4:3a:0b:52:47:09:68:61:cd:5a:87:ce:f4:70:de:b9: 0a:9a:12:ea:59:d3:9a:46:70:2c:6b:d1:f7:e7:83:6a:f2:26: 88:d5:3d:cf:b7:36:97:6b:f5:a6:3f:63:34:7e:d9:13:53:e5: 16:e5:5e:c4:b6:25:f7:6c:82:71:ee:e7:3e:25:fe:47:a0:ce: 8f:43:71:aa:54:3b:d5:9b:46:ad:72:92:ca:df:47:fc:17:b0: e0:2e:a4:d0:31:c6:a2:1d:7b:de:67:53:a8:28:c4:80:88:08: 1b:c0:d3:a1:f8:5e:53:68:56:f3:f6:af:94:ae:b3:f7:75:91: 76:91:8a:df:95:41:1f:1d:34:8d:38:f7:39:ca:9e:35:73:8e: 53:6d:85:e0:d9:ce:e7:4c:80:95:84:9a:9e:02:a0:f7:7e:dc: 11:35:66:c2:f6:7b:71:17:32:8b:a3:7d:ff:08:4c:9b:df:91: 79:6c:23:0f:9f:8a:b8:43:e3:dc:05:32:f6:b1:a8:0c:42:31: bb:29:52:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFMBgfZ8RJnNqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzA1MzUwNTgtOGY5ZC00ZDEwLWFkMWQtZTc1OWM1NGRlN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsTs+Po36GxjH9m8ebv5I4GqgI+BJPhTQ4hQ fEe18yrExSWipcaRQRUOTob09/ogD1lntn8Hi1TtzuWE8Kte8PwQOLiecM+r0FsI F7qZH9Nf0MW2Xaja0IeEVWNIjBWsfOk4rWgvlz+vS5k6DoFoSnGQlP1SNP4WLxJ4 5N7ZnJXNwnYtxS2LP5+nj7CtOd/34QTKe5VhG9AEp2pIGcn1PSb5Mpe5cEhq2QkN gsZA0O4yXVhYjit+57J6Vo6fDd7HVu01JDMiDOncOi5HN9ewcGtn/cyrVUxBGk3Z sgw5RkkTshraV7td9pRPn2FzxQowMJR4tKE8dB3y2hHbWH6f7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJCYUQrkzlwuGE0+0tGknj5kFcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY5MWM3MDctMWE3ZC0z YTRhLWFkYWYtZGIyNTQzNDQ2MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH4Tc/76CrXP3Ey0/4L0QJdHaUZQEkB/IP/5XvMUlvIkfXa3It99 3dFxMrKzZlqnUgHq6zBD6tsYtDoLUkcJaGHNWofO9HDeuQqaEupZ05pGcCxr0ffn g2ryJojVPc+3Npdr9aY/YzR+2RNT5RblXsS2JfdsgnHu5z4l/kegzo9DcapUO9Wb Rq1yksrfR/wXsOAupNAxxqIde95nU6goxICICBvA06H4XlNoVvP2r5Sus/d1kXaR it+VQR8dNI049znKnjVzjlNtheDZzudMgJWEmp4CoPd+3BE1ZsL2e3EXMoujff8I TJvfkXlsIw+firhD49wFMvaxqAxCMbspUg4= -----END CERTIFICATE-----Generated at Wed Jul 29 05:45:53 2026 by rpki-client